A system that collects and analyzes security logs in real time, helping to detect suspicious activity.